CVE-2025-28055: Shinnku Upset-Gal-Web

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

upset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit

Affected products

• Shinnku Upset-Gal-Web: version 7.1.0 only

Published 2025-05-13. Last modified 2026-06-17.